Post-authentication Banner

BajaNivel 1Automatizadacisco-nxos

Descripción

A post-authentication banner is displayed to the user after a successful login. It can also serve as a legal notice to authorized users of the equipment to notify them of any logging that may be configured. This banner is not appropriate to notify unauthorized users of any penalties to accessing the device, because after successful login corresponding laws might have already been violated. Post-authentication banners can be used to reduce the risk of human error. For example by highlighting the current environment (Production or Lab). Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all', which adds default values).

Cómo se verifica

Método de auditoría: Patrón de configuración

Patrón: (?m)^banner exec \S

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

! Configure an exec banner as shown below. The delimiter character shown is a "^", but any character can serve as a delimiter. banner exec ^ > Enter your standard EXEC Banner text here. End with the same delimiter as used above > ^

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: cisco-nxosnetworkaaa
Referencia: CIS Cisco NX-OS Benchmark v1.2.0 - 1.3.2 Post-authentication Banner

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target cisco-nxos